Privacy policy (GDPR)

POLICY

Processing of personal data

This policy was established on 16 May 2018

​Last updated: 7 July 2021

Purpose

We safeguard your privacy. You must be able to feel secure when you entrust us with your personal data. We have established this policy for this reason. It is based on current applicable data protection legislation and clarifies how we work to protect your rights and privacy.

The purpose of this policy is to inform you of how we process your personal data, how we use this data, who will have access to them and under which terms and conditions, and how you can protect your rights.

Background

We process your personal data primarily to fulfil our obligations to you. Our point of departure is to avoid processing personal data beyond what is necessary. We also need your personal data to provide you with good service, with regard to information, for example. We may also need your personal data to comply with applicable laws.

Guidelines

What personal data do we process?

We only process personal data when we have a legal basis to do so. We do not process personal data unless it is necessary to do so in order to fulfil obligations under contract and law.

We process the following data:
(a) names;
(b) address;
(c) e-mail address;
(d) telephone numbers;
(e) age;
(f) personal identity number upon employment;
(g) sex;
(h) title;
(i) username;
(j) corporate credit card numbers and other bank-related information;
(k) information that you registered of voluntarily and of your own accord;
l) content that you publish yourself, so-called user-generated content.

How do we access your personal data?

Wherever possible, we try to obtain your consent before we start to process your personal data. We do this by allowing you to fill in explicit consent clauses in those cases where the processing is based on consent. You have the right to withdraw your consent at any time. We will then no longer process your personal data or collect new data, provided that the data is not required in order for us to fulfil our obligations under contract or law. Keep in mind that revocation of consent may mean that we will not be able to fulfil the obligations we have in relation to you.

We also have access to your personal data in the following ways:
(a) information you provide to us directly;
b) information registered when you visit our website;
(c) information we obtain from public registers;
d) information we receive when you register for our courses or seminars;
(e) information we receive when you sign up for newsletters and other mailings;
(f) information we receive when you respond to questionnaires and surveys;
g) information we receive when you contact us, apply for a job with us, visit us or otherwise contact us.

What information do we provide you with?

If we collect your personal data, we will inform you about how we have obtained that data, what we will use it for, what rights you have under data protection legislation and how you can protect these rights. You will also be informed about who is responsible for the personal data processing and how you can contact us if you have questions or need to submit a request or inquiry regarding your personal data and/or rights.

Are your personal data being processed in a secure manner?

We have procedures and working methods to ensure that your personal data are processed in a secure manner. Our starting point is that the only employees and other persons within the organisation who have access to your data are those individuals who need this personal data to perform their duties. With regard to sensitive personal data, we have set up special access controls, which increase the protection of your personal data. Our security systems are developed with your privacy in focus and provide a high degree of protection against encroachment, destruction and other changes that may pose a risk to your privacy.
We do not transfer personal data in instances other than those expressly set out in this policy.

When do we disclose your personal data?

As a general rule, we will not disclose your personal data to a third party unless you have consented to this or if it is not necessary do so in order for us to meet our obligations under contract or law. In cases where we disclose personal data to a third party, we draw up confidentiality agreements and ensure that the personal data is processed in a secure manner.

Responsibility

Mercado Medic AB is the data controller, which means that we are responsible for how your personal data is processed and for ensuring that your rights are protected.

Tel. no.: +46 (0) 8 555 143 00
E-mail address: info@mercado.se